--- title: CISA gives Ray three days, GitLab's 9.4 stays fresh description: CISA is giving federal agencies until August 20 to patch or kill an actively exploited Ray AI framework RCE, reachable from a plain browser and with a history... canonical: https://daily.dev/posts/cisa-gives-ray-three-days-gitlab-s-9-4-stays-fresh-kkaej1cgx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA gives Ray three days, GitLab's 9.4 stays fresh | daily.dev og:description: CISA is giving federal agencies until August 20 to patch or kill an actively exploited Ray AI framework RCE, reachable from a plain browser and with a history... og:url: https://daily.dev/posts/cisa-gives-ray-three-days-gitlab-s-9-4-stays-fresh-kkaej1cgx og:image: https://api.daily.dev/og/posts/KKAeJ1CgX.png og:image:alt: CISA gives Ray three days, GitLab's 9.4 stays fresh og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA gives Ray three days, GitLab's 9.4 stays fresh **[Security Digest](https://daily.dev/sources/security_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary CISA is giving federal agencies until August 20 to patch or kill an actively exploited Ray AI framework RCE, reachable from a plain browser and with a history of mass exploitation. Oracle shipped its biggest patch update yet, 925 CVEs across 943 patches, nearly quadrupling June's volume. Two malvertising campaigns are using real claude.ai pages to push infostealers at people searching for Claude Desktop, one hitting 29 organizations with SectopRAT. Microsoft Copilot leaked its own exploit chain when researchers just kept asking it why an attack shouldn't work. ## Content **TLDR:** CISA is giving federal agencies until August 20 to patch or kill an actively exploited Ray AI framework RCE, reachable from a plain browser and with a history of mass exploitation. Oracle shipped its biggest patch update yet, 925 CVEs across 943 patches, nearly quadrupling June's volume. Two malvertising campaigns are using real claude.ai pages to push infostealers at people searching for Claude Desktop, one hitting 29 organizations with SectopRAT. Microsoft Copilot leaked its own exploit chain when researchers just kept asking it why an attack shouldn't work. --- ## CISA orders federal agencies to patch actively exploited Ray RCE in three days CVE-2025-62593 is an unauthenticated code-injection bug in the Ray distributed computing framework, reachable through an ordinary web browser with no elaborate setup required. CISA added it to the Known Exploited Vulnerabilities catalog on August 17 and gave agencies until August 20 to patch or shut the software down. Anyscale fixed it in Ray 2.52.0, but the bigger worry is history: the earlier ShadowRay campaign compromised over 230,000 exposed Ray servers, and attackers are also going after Ray developers directly through phishing and malvertising to get a foothold into corporate networks. [Read more](https://daily.dev/posts/ZJWPYGCTW) ## Oracle's August patch update hits 925 CVEs, nearly 4x June's volume Oracle's August 2026 Critical Security Patch Update fixes 925 unique CVEs across 943 patches and 23 product families, including 154 critical-severity bugs. That's roughly four times June's patch count and about 65% of July's full quarterly release, which is starting to blur the line between the monthly cadence Oracle introduced in May and the bigger quarterly cycle. Fusion Middleware and Hyperion each took 262 patches, the most of any product family, so if you run either, budget real time for this one. [Read more](https://daily.dev/posts/R6YGFHPMB) ## Two malvertising campaigns are hijacking Claude's own domain to drop infostealers Huntress documented FakeAgent, a campaign that hit 29 organizations in two days after victims searched for Claude Desktop on Bing and clicked a sponsored ad to a malicious public Claude Artifact hosted on claude.ai itself. The trojanized installer used DLL sideloading to deploy SectopRAT, stored C2 rotation data on the Ethereum blockchain via EtherHiding, and had 7,100 views before Anthropic pulled it. A separate campaign, MacSync, does the same trick on macOS through a fake Apple Support share page that walks victims through pasting a curl command, ultimately draining crypto wallets and stealing keychain data via a six-stage infection chain tied to the AMOS/Atomic Stealer lineage. [Read more](https://daily.dev/feed-by-ids?id=iHAL6pyPn&id=rQ1vl8kjj&id=DLt3BTLjo) ## Researchers got Microsoft Copilot to leak its own exploit by asking it repeatedly why an attack wouldn't work Varonis Threat Labs didn't reverse-engineer anything, they just interrogated Copilot about its own defenses until it revealed an undocumented URL parameter, autorun=1, mid-refusal. Combined with Copilot's existing query pre-fill parameter, that became a one-click prompt injection that inherited the victim's full authenticated session, letting attackers exfiltrate data from connected Gmail, Drive, or OneDrive accounts and poison Copilot's persistent memory in ways that survived password resets. Varonis reported it in December 2025, Microsoft's partial fix landed in February, and the full patch didn't ship until August 18, tracked as CVE-2026-24301 with a CVSS of 8.8. [Read more](https://daily.dev/posts/d2IYePSem) --- ## Also notable - **N-able N-central under active exploitation despite two hotfixes:** CVE-2026-18556 and its bypass CVE-2026-18577 let attackers get unauthenticated admin access to N-central consoles and pivot into managed endpoints via the Take Control feature, with unpatched rates still at 28.6% for self-hosted instances. [Read more](https://daily.dev/posts/PANfIjdL3) - **LSHIY password-spraying campaign abuses deprecated OAuth grant to skip MFA entirely:** The ROPC grant abuse drove a 155x spike in credential spraying against Azure CLI in H1 2026, with over 81 million login attempts and 78 compromised accounts in one two-week window. [Read more](https://daily.dev/posts/lV08sAVSh) - **AI still can't write secure code even as it gets better at finding zero-days:** Veracode's testing across 100+ model versions found no model exceeds a 68% security pass rate, with 44% of AI-generated code containing an OWASP Top 10 flaw, and LLM patches for known vulnerabilities only succeed 26% of the time. [Read more](https://daily.dev/posts/gKwZ7v79E) - **Cursor patched a bug where approved shell commands could be hijacked via environment variable poisoning:** CVE-2026-22708 let shell built-ins silently modify environment variables outside the Auto-Run allowlist, so a later approved command like git branch would execute attacker-controlled code; Cursor rated it High and patched it in version 2.3, five months after the initial report. [Read more](https://daily.dev/posts/WJC417eZN) - **Rapid7 finds exploited-vulnerability counts flat while disclosures nearly doubled:** Q2 2026 saw 8,539 high/critical CVEs disclosed versus 4,268 a year earlier, while the number actually exploited held around 40, and missing-authentication bugs (CWE-306) jumped 247% year over year. [Read more](https://daily.dev/posts/FLLEyoBem) ## Similar posts on daily.dev - [Windows shell spoofing vulnerability puts sensitive data at risk](https://daily.dev/posts/windows-shell-spoofing-vulnerability-puts-sensitive-data-at-risk-39k3nizjs) · CSO Online · 0 upvotes · 0 comments - [CISA orders feds to patch Windows flaw exploited as zero-day](https://daily.dev/posts/cisa-orders-feds-to-patch-windows-flaw-exploited-as-zero-day-gw4v2yydq) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#oracle](https://daily.dev/tags/oracle), [#microsoft-copilot](https://daily.dev/tags/microsoft-copilot) [View this post on daily.dev](https://daily.dev/posts/cisa-gives-ray-three-days-gitlab-s-9-4-stays-fresh-kkaej1cgx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/cisa-gives-ray-three-days-gitlab-s-9-4-stays-fresh-kkaej1cgx","headline":"CISA gives Ray three days, GitLab's 9.4 stays fresh","text":"CISA is giving federal agencies until August 20 to patch or kill an actively exploited Ray AI framework RCE, reachable from a plain browser and with a history of mass exploitation. Oracle shipped its biggest patch update yet, 925 CVEs across 943 patches, nearly quadrupling June's volume. Two malvertising campaigns are using real claude.ai pages to push infostealers at people searching for Claude Desktop, one hitting 29 organizations with SectopRAT. Microsoft Copilot leaked its own exploit chain when researchers just kept asking it why an attack shouldn't work.","url":"https://daily.dev/posts/cisa-gives-ray-three-days-gitlab-s-9-4-stays-fresh-kkaej1cgx","datePublished":"2026-08-19T04:18:49.733Z","dateModified":"2026-08-19T04:19:12.588Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"CISA gives Ray three days, GitLab's 9.4 stays fresh"}]} ```